Cyber Threat Analyst

About the role

Remote work with a detection and automation engineering group. The job is about turning security operations needs into working automation, integrations and detection content, then proving it holds up.

At a glance

What you will do

• Build automation and intelligence-assisted workflows that sharpen detection and response
• Wire security tools together into one coherent detection architecture
• Test, evaluate and validate detections and automation workflows
• Analyse telemetry for anomalies, trends and gaps in coverage
• Write and keep up documentation, SOPs and runbooks
• Work with SOC, threat intelligence and incident response colleagues

What they look for

• Eight or more years in relevant security work
• A degree in engineering or another IT or security field, or equivalent experience
• Hands-on knowledge of detection engineering and security automation
• Experience integrating security platforms and analysing security data
• Ability to gather requirements and validate what gets built
• Familiarity with SOAR and SIEM tools such as Splunk Enterprise Security and Splunk SOAR